Protecting audit data

Although sensitive data is not included in audit messages, the audit data itself can be considered sensitive regarding to integrity and non-repudiation. To protect audit data, you can use secure auditing.

If your organization is impacted by the General Data Protection Regulation (GDPR), ensure that GDPR-compliance is met when auditing with OneSpan Authentication Server by doing the following:

• Encrypting the database and connections to it if database auditing is used.
• Encrypting the folder or disk containing the audit text file if text file auditing is used.
• Encrypting the Windows Event Logs folder (also on remote machines if remote logging is enabled).
• Encrypting the Linux syslog folder (also on remote machine if remote logging is enabled).

For more information about GDPR, refer to the OneSpan Authentication Server General Data Protection Regulation Compliance Guide.